Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Erk0ZRM3bUV43W11bhwsLTbyBCY.roa
File: Erk0ZRM3bUV43W11bhwsLTbyBCY.roa (raw, json)
Hash identifier: rONCYzgnmI/4K3sxCv9RCphHJ3Ym04oyNJooI9FjFk8=
Subject key identifier: 12:B9:34:65:13:37:6D:45:78:DD:6D:75:6E:1C:2C:2D:36:F2:04:26
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B80EBBEC417F53A1156383B4B06EAEB5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Erk0ZRM3bUV43W11bhwsLTbyBCY.roa
Signing time: Sat 19 Sep 2026 05:06:08 +0000
ROA not before: Sat 19 Sep 2026 05:06:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.126.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.26.222.0/24 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.162.0/23 maxlen: 24
2.27.167.0/24 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.239.0/24 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.130.0/23 maxlen: 24
13.143.136.0/24 maxlen: 24
13.143.145.0/24 maxlen: 24
13.143.146.0/23 maxlen: 24
13.143.148.0/23 maxlen: 24
13.143.150.0/23 maxlen: 24
13.143.168.0/24 maxlen: 24
13.143.169.0/24 maxlen: 24
13.143.170.0/24 maxlen: 24
13.143.171.0/24 maxlen: 24
13.143.172.0/22 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.46.0/23 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.237.0/24 maxlen: 24
31.77.238.0/24 maxlen: 24
31.77.240.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.201.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:0e:bb:ec:41:7f:53:a1:15:63:83:b4:b0:6e:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 19 05:06:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12b9346513376d4578dd6d756e1c2c2d36f20426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:35:b6:25:2a:58:7b:43:72:82:ef:45:da:
00:c4:88:e6:5d:a1:19:0a:36:fd:75:0e:8e:99:fb:
2c:f6:5b:94:98:25:55:c4:2c:42:e0:63:38:30:cc:
98:e5:97:9b:cb:bc:31:a4:6d:9b:fa:60:88:f2:41:
a1:5e:e1:9a:bf:6b:4e:77:f0:df:6f:b0:26:0b:41:
1e:fb:fe:c8:92:15:f9:c8:23:35:10:ae:43:32:1c:
0a:09:99:81:bb:6b:25:cf:a9:48:c9:61:9b:6a:57:
f7:c6:7c:4e:2f:ad:76:77:67:6e:b9:a9:75:6a:75:
85:b8:71:d9:2e:b7:9d:ff:6a:96:fe:ad:35:c8:61:
fa:c6:09:cd:1a:b7:63:be:5d:7c:ba:eb:0c:38:56:
a8:50:a9:ca:5d:a9:e3:7e:c2:d7:95:34:0b:4b:bc:
88:d0:8c:30:cd:5b:6a:c5:73:b9:56:00:07:f6:30:
33:aa:e7:71:9c:9e:32:b7:64:29:29:09:7f:65:91:
c5:f9:80:a7:b4:99:d4:2e:2f:d3:14:ca:f0:54:2d:
43:c4:c9:9e:e9:66:28:d5:de:82:cd:46:33:2c:41:
88:bc:00:5a:ff:38:41:ad:f8:7d:da:55:dc:9e:71:
49:49:ad:ba:43:db:23:52:3f:29:41:06:e1:5a:cd:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:34:65:13:37:6D:45:78:DD:6D:75:6E:1C:2C:2D:36:F2:04:26
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Erk0ZRM3bUV43W11bhwsLTbyBCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
2.26.146.0/24
2.26.159.0/24
2.26.191.0/24
2.26.208.0/21
2.26.222.0/24
2.27.103.0/24
2.27.162.0/23
2.27.167.0/24
2.27.228.0/22
2.27.239.0/24
13.143.48.0/22
13.143.72.0/21
13.143.130.0/23
13.143.136.0/24
13.143.145.0-13.143.151.255
13.143.168.0/21
31.76.37.0/24
31.76.123.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.46.0/23
31.77.101.0/24
31.77.119.0/24
31.77.209.0/24
31.77.237.0-31.77.238.255
31.77.240.0/24
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.201.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
Signature Algorithm: sha256WithRSAEncryption
01:ba:e5:09:30:cc:ef:90:be:5b:3c:7a:a7:30:b7:77:c5:f5:
1b:3f:5c:59:63:a8:d9:ab:97:db:e4:78:ea:03:75:22:70:04:
ed:d4:64:cf:aa:67:e7:23:7d:7f:e1:84:a6:d7:00:67:86:a5:
40:57:04:5d:0a:dc:fc:39:90:7d:87:1f:42:0b:43:1a:19:51:
27:1d:77:c0:c1:fd:26:53:64:1a:9b:a2:39:2d:b0:b9:bd:5a:
40:eb:50:33:72:fb:26:3c:3f:c4:9c:32:da:99:97:49:8e:58:
85:9c:1b:ab:b1:80:1e:62:ea:50:27:68:70:61:5e:26:56:52:
83:e2:c5:82:e2:b4:0d:a6:f5:ab:21:45:32:83:f0:48:90:10:
ba:18:e8:e3:02:19:67:d9:f2:5e:d8:9b:d0:ff:5b:46:d4:98:
65:b0:92:42:23:65:ea:7f:0d:d4:d1:4d:43:75:36:af:c9:26:
e6:e0:54:cc:5a:5f:36:ae:a7:a7:4c:4e:2c:c4:90:bb:f5:d6:
a3:51:1d:ce:77:4b:3c:5d:97:66:6c:1b:0a:bc:7e:cb:32:bf:
7c:f1:4d:4b:31:a7:55:30:51:d2:a6:b5:7c:ba:f0:ee:31:b9:
4f:57:af:54:fe:2f:6e:f9:a5:16:33:a3:0a:2b:de:15:4d:83:
e8:0f:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:18 2026 by rpki-client